Skip to content
OpenAdvisories

Archive

14 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /14 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

20 results · Clear filters · Feed

  • High 8.8
    CVE-2022-48503 Exploited

    The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS…

    Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
    KEV Oct 20, 2025
  • High 7.5
    CVE-2023-21265

    In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information …

    Google Android Android
  • High 7.1
    CVE-2023-40013

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in external-svg-loader

    SVG Loader is a javascript library that fetches SVGs using XMLHttpRequests and injects the SVG code in the tag's place. According to the docs, svg-loader will strip all JS code before injecting the SVG file for security reasons but the input sanitization logi…

    shubhamjain svg-loader external-svg-loader npm
  • High 8.4
    CVE-2023-38721

    IBM i privilege escalation

    The IBM i 7.2, 7.3, 7.4, and 7.5 product Facsimile Support for i contains a local privilege escalation vulnerability. A malicious actor could gain access to a command line with elevated privileges allowing root access to the host operating system. IBM X-Force…

    IBM i
  • High 8.2
    CVE-2023-0872 Public exploit

    ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users

    The Horizon REST API includes a users endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is vulnerable to elevation of privilege. The solution is to upgrade to Meridian 2023.1.6, 2022.1.19, 2021.1.30, 2020.1.38 or Horizo…

    The OpenNMS Group Meridian Horizon org.opennms:opennms-webapp-rest Maven
  • High 7.5
    CVE-2023-38741

    IBM TXSeries for Multiplatforms denial of service

    IBM TXSeries for Multiplatforms 8.1, 8.2, and 9.1 is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read operations. By conducting a slowloris-type attacks, a remote attacker could exploit this vulnerability to …

    IBM TXSeries for Multiplatforms
  • High 8.8
    CVE-2023-33013

    A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1…

    Zyxel NBG6604 firmware Network devices
  • High 7.3
    CVE-2023-4322

    Heap-based Buffer Overflow in radareorg/radare2

    Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.

    radareorg radareorg/radare2 radare2 Ubuntu
  • High 7.1
    CVE-2023-28535

    WordPress Paytm Payment Donation Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Paytm Paytm Payment Donation plugin <= 2.2.0 versions.

    Paytm Paytm Payment Donation
  • High 7.1
    CVE-2023-30754

    WordPress AdFoxly – Ad Manager, AdSense Ads & Ads.txt Plugin <= 1.8.5 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in AdFoxly AdFoxly – Ad Manager, AdSense Ads & Ads.Txt plugin <= 1.8.5 versions.

    AdFoxly AdFoxly – Ad Manager, AdSense Ads & Ads.txt
  • High 7.1
    CVE-2023-30489

    WordPress Email Subscription Popup Plugin <= 1.2.16 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Email Subscription Popup plugin <= 1.2.16 versions.

    I Thirteen Web Solution Email Subscription Popup
  • High 7.1
    CVE-2023-30475

    WordPress Coupon Affiliates Plugin <= 5.4.5 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Elliot Sowersby, RelyWP WooCommerce Affiliate Plugin – Coupon Affiliates plugin <= 5.4.5 versions.

    Elliot Sowersby / RelyWP WooCommerce Affiliate Plugin – Coupon Affiliates Web / CMS
  • High 7.1
    CVE-2023-30483

    WordPress Watu Quiz Plugin <= 3.3.9.2 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Watu Quiz plugin <= 3.3.9.2 versions.

    Kiboko Labs Watu Quiz
  • High 8.3
    CVE-2023-4321

    Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

    Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3.

    cockpit-hq cockpit-hq/cockpit cockpit-hq/cockpit Packagist
  • High 7.8
    CVE-2023-3160

    Local privilege escalation in security products for Windows

    The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions.

    ESET spol. s.r.o. ESET Internet Security ESET NOD32 Antivirus ESET Smart Security Premium Windows
  • High 7.5
    CVE-2023-3263

    The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the…

    Dataprobe iBoot PDU
  • High 7.5
    CVE-2023-3261

    The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in t…

    Dataprobe iBoot PDU
  • High 7.2
    CVE-2023-3260

    The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `u…

    Dataprobe iBoot PDU
  • High 7.8
    CVE-2023-40283

    An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2023-40274

    zola Path Traversal vulnerability

    An issue was discovered in zola 0.13.0 through 0.17.2. The custom implementation of a web server, available via the "zola serve" command, allows directory traversal. The handle_request function, used by the server to process HTTP requests, does not account fo…

    zola zola Wolfi crates.io